Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft
File:                     6KpgLnNuGIzK5CRidiw3dvhbeTc.mft (raw, json)
Hash identifier:          fZfJZrnvqe7lF8OE84iXimavBld28e5dq0uAfkm0ALs=
Subject key identifier:   F9:52:4C:17:28:93:42:D3:AE:86:D7:2D:61:12:09:FA:DE:BA:4E:5A
Authority key identifier: E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37
Certificate issuer:       /CN=E8AA602E736E188CCAE42462762C3776F85B7937
Certificate serial:       2B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft
Manifest number:          0F5B
Signing time:             Fri 21 Aug 2026 23:10:30 +0000
Manifest this update:     Fri 21 Aug 2026 23:10:30 +0000
Manifest next update:     Sun 20 Sep 2026 23:10:30 +0000
Files and hashes:         1: 6KpgLnNuGIzK5CRidiw3dvhbeTc.crl (hash: dOQ2JdEO1mwPskikv6I03Y5Xa1BS5jT/SgzRfvWFDwQ=)
                          2: C8dzQ5c3GcJZdERpfQpT7QinNvA.roa (hash: QCiyiD9zDWp+qjyOc5cKS04fwonGktEyi79u365ZSL0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8AA602E736E188CCAE42462762C3776F85B7937
        Validity
            Not Before: Aug 15 01:33:12 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=F9524C17289342D3AE86D72D611209FADEBA4E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:e5:48:97:82:96:f3:b6:7c:2a:71:bc:0c:
                    d4:3e:92:82:4e:19:4c:49:46:90:d9:55:c3:d6:e0:
                    4c:d2:d2:05:c6:5b:b8:0d:f8:20:7e:65:8b:d6:9d:
                    27:66:6e:24:62:47:a5:74:cf:93:5c:80:64:52:ba:
                    f2:6e:10:93:81:01:fe:be:03:e1:bc:1f:65:f2:eb:
                    ee:c7:51:3d:11:e4:75:5e:f4:c1:37:98:54:6c:f1:
                    31:a9:d2:b7:ea:d8:70:27:95:ee:30:2e:9e:e6:7d:
                    3d:d3:76:66:ef:be:6d:24:ca:9a:47:6e:6f:f9:9e:
                    21:cb:6d:22:ef:52:c0:27:ca:6a:df:de:c2:11:98:
                    e4:ce:63:cd:99:41:6c:be:f4:55:c9:64:2e:de:8a:
                    56:62:3c:8e:2c:0c:42:d1:40:02:a2:1f:44:41:d1:
                    98:ea:8c:02:68:de:9f:ef:bc:cb:e7:03:c4:22:ee:
                    a7:86:15:3c:7b:0d:a0:3a:46:b1:0e:82:91:3c:68:
                    ed:e0:70:6a:10:84:c1:1c:52:65:10:40:16:2b:30:
                    e4:47:28:30:9e:52:bc:03:c7:91:99:8c:cc:19:48:
                    1d:76:7a:3d:bb:fe:92:12:d1:08:50:df:cd:16:8e:
                    22:ec:e3:60:e0:a5:40:30:2c:61:54:85:1d:ea:4e:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:52:4C:17:28:93:42:D3:AE:86:D7:2D:61:12:09:FA:DE:BA:4E:5A
            X509v3 Authority Key Identifier:
                keyid:E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:b2:0a:53:9f:64:6f:0d:ab:f9:b6:4a:02:81:bc:84:1c:
         16:3b:c1:a2:15:39:a7:d4:26:eb:10:73:37:5e:20:29:50:c4:
         40:d4:a1:bd:a7:a9:f8:e8:0c:c4:79:0d:bd:05:7e:df:ec:f2:
         b1:5c:80:b6:85:c7:aa:69:49:8b:46:de:13:e0:ca:70:8d:d2:
         26:e4:00:29:e9:5a:48:b2:29:cc:20:09:0f:77:3d:c5:59:2a:
         ca:94:0f:72:a9:cd:83:4e:c7:80:3f:0a:3b:f5:a7:a0:dc:12:
         d9:d0:47:ba:8f:b7:cd:48:96:b5:3c:98:fc:8e:6f:46:a5:dd:
         1b:f3:59:26:b3:10:77:36:bc:11:6c:02:26:75:01:84:71:72:
         3f:50:cc:0d:9b:1d:f5:8b:6b:6f:aa:e9:fa:5b:8e:06:d0:b0:
         7a:c7:64:b2:55:30:58:fb:f0:79:80:71:a2:4e:fe:6a:a7:a8:
         44:ad:0d:8d:2a:d3:0f:dd:c4:42:3d:ab:57:f7:d0:3b:77:33:
         11:d2:18:94:66:7c:bb:53:46:63:6c:37:15:a7:f0:ad:71:a8:
         1a:5e:a4:c1:50:50:d3:71:71:23:f6:51:58:85:9d:29:3b:02:
         43:56:bc:85:55:a6:23:f5:e3:46:29:9a:5b:d1:ec:44:1d:cd:
         dd:08:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:48:04 2026 by rpki-client